field notes · regulatory

Navigating EU Cosmetics Regulation as a US beauty brand

EC 1223/2009. Responsible Person. CPNP. Post-Brexit UK rules. Where US founders typically lose 12–18 months.

EU Cosmetics Regulation. What it actually requires.

The framework is Regulation (EC) No 1223/2009. Every cosmetic product placed on the EU market must clear it before a single unit ships. There is no grace period and no equivalence with FDA rules. A product that is fully compliant in the United States can be illegal to sell in Frankfurt the day it lands.

Most US founders learn this the hard way — usually after the first DAF container is already at port.

The regulation is not difficult to understand. It is difficult to operate.

pull-out

Five things you cannot ship without

  1. Responsible Person (RP) appointed inside the EU. A natural or legal person established in the Union who carries legal accountability for the product. Not your distributor by default. Not optional. The RP's name and EU address must appear on the label.

  2. Product Information File (PIF) maintained at the RP's address. Formulation, safety assessment by a qualified Safety Assessor, manufacturing data, animal testing statement, claim substantiation. Authorities can request it at any time. They do.

  3. CPNP notification. Cosmetic Product Notification Portal. Every formulation, every variant, every claim change. Until it is in CPNP, it cannot legally be sold.

  4. Compliant labelling and language. Ingredients in INCI. Period-after-opening symbol. Country-of-origin. Local language for warnings — that means German for Germany, French for France, Italian for Italy. A single English-only label kills the SKU at customs in three of your top five markets.

  5. A Safety Assessor signature. Not a US toxicologist. An EU-qualified pharmacist, doctor, or chemist who signs off on the Cosmetic Product Safety Report (Part B). Their stamp is what makes the PIF valid.

What the United States teaches you that does not transfer

OTC sunscreens are drugs in the US. In the EU they are cosmetics. The dossier you built for FDA monograph compliance does not satisfy CPNP. The UV filter list is different. The claim language is different. Your "broad spectrum SPF 50" line on the front of pack will be rejected by retailers in two-thirds of the EU if you have not run claim substantiation under EU Regulation 655/2013.

INCI nomenclature is shared with the US — but the prohibitions and restrictions list (Annexes II–VI of 1223/2009) is not. Ingredients perfectly legal in California may be on Annex II.

Animal testing is banned for finished cosmetics and for ingredients used exclusively in cosmetics. If your safety data anywhere in the chain rests on animal testing — even from your supplier, even from a third-country toxicology study — your product is non-compliant. Period.

Post-Brexit: the UK is not the EU

Since 1 January 2021 the UK runs a separate regime. Product Information File at a UK address. UK Responsible Person. UK SCPN notification — a parallel database to CPNP, with its own login. A US brand selling into both EU and UK now needs two compliance stacks. Many founders discover this when their UK distributor requests the SCPN reference and there isn't one.

The real cost of getting it wrong

Twelve to eighteen months of wasted budget. That is the typical pattern. You ship into a Dutch distributor. Customs holds the container. The PIF is incomplete. The Safety Assessor is in Texas, not Madrid. The labels are English-only. You pay storage fees while you scramble. The retailer's slot is given to the brand who showed up regulator-ready.

By the time the dossier is right, the buyer has moved on and the launch window is closed.

This is the single most expensive mistake we see. It is also the most preventable.

How KAIMA handles this

Regulatory work belongs with regulatory experts.

If you already have an in-house regulatory lead or external advisor, we work alongside them — making sure timelines, dossier scope, and Responsible Person decisions stay aligned with the rest of the European launch. If you don't have one, we can introduce vetted EU and UK partners we have worked with before.

What KAIMA brings is the operating layer that sits above the specialism. Twenty years inside L'Oréal, Johnson & Johnson, and COOLA taught us where compliance work breaks the launch — usually not in the chemistry, but in the orchestration between the regulatory team, the supply chain, the distributors, and the retail calendar. We hold that orchestration. Your regulatory experts stay in their lane.